GitHub Advisoryadvisory · Maven

GHSA-4j38-wjhf-884r Arbitrary code execution in Richfaces

CRITICAL Published 2022-05-13 Modified 2022-11-08 Official page ↗
Aliases
CVE-2018-12533
Ecosystem
Maven
Packages
org.richfaces:richfaces-core
Severity
Critical
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-917
Reviewed
2022-11-08

Affected packages

• Maven org.richfaces:richfaces-core: >= 3.1.0, <= 3.3.4 (no fix yet)

Description

JBoss RichFaces 3.1.0 through 3.3.4 allows unauthenticated remote attackers to inject expression language (EL) expressions and execute arbitrary Java code via a /DATA/ substring in a path with an org.richfaces.renderkit.html.Paint2DResource$ImageData object, aka RF-14310.

Related

Alias · CVE (1)

  • CVE-2018-12533 JBoss RichFaces 3.1.0 through 3.3.4 allows unauthenticated remote attackers to inject expression language (EL) expressions and execute… vulnerability

Weakness · CWE (1)

  • CWE-917 Improper Neutralization of Special Elements used in an Expression Language Statement weakness

References